Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/c7f56a69-0c3c-37e5-80e1-32c30e788993.roa
File: c7f56a69-0c3c-37e5-80e1-32c30e788993.roa (raw, json)
Hash identifier: X54nPzcmmgRBGLvA6xTnTZJ8S5zcE9pnxRrfTmCg5Xs=
Subject key identifier: B7:BE:96:A2:2D:B8:C6:3F:8D:70:AB:44:FC:86:9A:34:E7:E1:41:8B
Certificate issuer: /CN=a7eafe65-cc16-48a7-b221-b00bfc181f3f
Certificate serial: 010D0C9F43285848748B1ABAF04D6C584459AB00
Authority key identifier: BF:EE:2C:A7:43:6D:DA:A8:2B:20:CC:E3:AF:1F:DB:92:53:B9:1F:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/c7f56a69-0c3c-37e5-80e1-32c30e788993.roa
Signing time: Mon 06 Jan 2025 14:00:52 +0000
ROA not before: Mon 06 Jan 2025 14:00:52 +0000
ROA not after: Sun 06 Apr 2025 13:00:52 +0000
asID: 14618
IP address blocks: 216.152.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:74:8b:1a:ba:f0:4d:6c:58:44:59:ab:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7eafe65-cc16-48a7-b221-b00bfc181f3f
Validity
Not Before: Jan 6 14:00:52 2025 GMT
Not After : Apr 6 13:00:52 2025 GMT
Subject: CN=72225f60-6283-4d0a-ba48-afebbda0e0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:64:84:4b:da:0b:42:75:a6:6f:48:cb:b7:51:
74:00:0d:0a:56:b1:4e:65:f2:af:30:1d:53:97:f9:
4d:0b:e7:24:99:40:89:b0:fb:8e:81:02:55:73:53:
a5:01:77:f1:e6:f7:5a:3a:89:37:1a:eb:23:cc:df:
f4:6f:62:61:0a:87:8e:0d:8f:85:37:58:fd:4a:d2:
ab:ee:df:83:59:ed:28:e7:fe:1d:6c:33:6f:ca:ae:
ad:1f:0e:24:93:7d:95:b5:85:59:bd:5b:73:b5:db:
fe:c7:2a:39:ed:46:50:bd:01:78:01:9c:e8:b2:09:
37:35:03:13:c2:28:3a:06:f7:3b:bb:2b:9d:eb:cf:
58:c6:f2:6c:b3:53:73:a6:92:f4:dd:1c:18:49:e3:
c6:1e:26:d1:b9:69:47:fa:19:6f:39:50:80:ef:8d:
1b:fb:3b:94:34:1b:ca:0a:c2:b3:f8:4f:60:81:e6:
d1:1c:62:0c:92:ed:23:7f:77:fe:af:89:37:5b:c9:
29:95:bd:2d:e1:3d:24:34:1b:f5:bf:d1:3e:e5:f8:
48:0f:12:fb:8a:ce:ee:93:e3:42:ea:27:97:f7:62:
eb:05:17:08:67:72:93:c6:3f:c8:61:76:b9:19:02:
41:1a:d0:9f:d6:18:ab:c4:33:db:ce:90:ba:ef:90:
a4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BE:96:A2:2D:B8:C6:3F:8D:70:AB:44:FC:86:9A:34:E7:E1:41:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/c7f56a69-0c3c-37e5-80e1-32c30e788993.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/a7eafe65-cc16-48a7-b221-b00bfc181f3f.crl
X509v3 Authority Key Identifier:
keyid:BF:EE:2C:A7:43:6D:DA:A8:2B:20:CC:E3:AF:1F:DB:92:53:B9:1F:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
216.152.77.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:e7:c4:3a:ee:a0:f3:e1:f3:7a:b2:76:6f:17:18:a4:c5:fc:
a5:ce:cb:3d:7d:92:46:4e:43:76:ca:18:fb:80:29:ad:95:f4:
0c:75:46:c9:4e:70:3f:44:58:e4:0a:39:50:4a:f7:fa:47:b6:
11:6f:0f:72:23:57:7d:13:8f:03:f9:5e:92:f7:bb:e1:ca:d3:
9c:3d:1d:c2:4a:b5:c7:3f:09:84:9f:15:5c:ab:f4:a0:21:c5:
e5:e9:29:d2:81:b2:0d:ef:3c:93:c8:eb:be:8e:1c:1e:a4:a0:
6c:4b:fc:78:04:c7:c7:cf:1e:22:2d:5d:ff:0f:d3:34:ae:88:
b6:d8:4d:5d:3b:84:97:81:5d:0f:4c:9d:89:b2:3d:b7:56:ae:
a8:c1:07:22:c4:5d:e9:2a:dd:a9:d5:c4:8e:91:18:9d:5d:ae:
cb:6c:13:fa:be:78:6e:4e:10:49:c5:3f:38:ed:6a:18:a7:8e:
f9:9e:13:df:e0:20:45:f8:ef:8c:33:71:ac:c8:35:0e:4d:b5:
ce:99:88:d6:70:26:75:42:07:23:ec:1c:71:59:cd:66:65:4f:
85:d2:15:86:cc:90:f8:7e:09:c5:03:e1:a8:51:55:33:40:2c:
65:01:2d:4b:f1:61:d8:5e:0c:17:2b:58:c6:66:89:43:51:bc:
c7:92:ab:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh0ixq68E1sWERZqwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTdlYWZlNjUtY2MxNi00OGE3LWIyMjEtYjAwYmZjMTgx
ZjNmMB4XDTI1MDEwNjE0MDA1MloXDTI1MDQwNjEzMDA1MlowLzEtMCsGA1UEAxMk
NzIyMjVmNjAtNjI4My00ZDBhLWJhNDgtYWZlYmJkYTBlMGJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGSES9oLQnWmb0jLt1F0AA0KVrFOZfKvMB1T
l/lNC+ckmUCJsPuOgQJVc1OlAXfx5vdaOok3GusjzN/0b2JhCoeODY+FN1j9StKr
7t+DWe0o5/4dbDNvyq6tHw4kk32VtYVZvVtztdv+xyo57UZQvQF4AZzosgk3NQMT
wig6Bvc7uyud689YxvJss1NzppL03RwYSePGHibRuWlH+hlvOVCA740b+zuUNBvK
CsKz+E9ggebRHGIMku0jf3f+r4k3W8kplb0t4T0kNBv1v9E+5fhIDxL7is7uk+NC
6ieX92LrBRcIZ3KTxj/IYXa5GQJBGtCf1hirxDPbzpC675CkYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLe+lqItuMY/jXCrRPyGmjTn4UGLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Vh
ZmU2NS1jYzE2LTQ4YTctYjIyMS1iMDBiZmMxODFmM2YvYzdmNTZhNjktMGMzYy0z
N2U1LTgwZTEtMzJjMzBlNzg4OTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdlYWZlNjUtY2MxNi00OGE3LWIy
MjEtYjAwYmZjMTgxZjNmL2E3ZWFmZTY1LWNjMTYtNDhhNy1iMjIxLWIwMGJmYzE4
MWYzZi5jcmwwHwYDVR0jBBgwFoAUv+4sp0Nt2qgrIMzjrx/bklO5H3cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2VhZmU2NS1jYzE2LTQ4YTctYjIyMS1iMDBi
ZmMxODFmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JhNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA7nxDruoPPh83qydm8XGKTF/KXOyz19kkZOQ3bKGPuAKa2V9Ax1RslO
cD9EWOQKOVBK9/pHthFvD3IjV30TjwP5XpL3u+HK05w9HcJKtcc/CYSfFVyr9KAh
xeXpKdKBsg3vPJPI676OHB6koGxL/HgEx8fPHiItXf8P0zSuiLbYTV07hJeBXQ9M
nYmyPbdWrqjBByLEXekq3anVxI6RGJ1drstsE/q+eG5OEEnFPzjtahinjvmeE9/g
IEX474wzcazINQ5Ntc6ZiNZwJnVCByPsHHFZzWZlT4XSFYbMkPh+CcUD4ahRVTNA
LGUBLUvxYdheDBcrWMZmiUNRvMeSq38=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:32:08 2025 by rpki-client